SecurityTracker > View Topics > Advisory

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

Jan 29 2002	XOOPS Portal Software Private Message System Lets Remote Users Execute Javascript on the Recipient's Computer
Jan 27 2002	XOOPS Object-Oriented Web Portal Software Lets Remote Users Inject SQL Commands that Will Be Executed By the Underlying SQL Database
Dec 16 2001	PHP-Nuke 'modules.php', 'submit.php', and 'user.php' Input Validation Flaws Allow Cross-Site Scripting Attacks
Dec 3 2001	PostNuke Displays User-Supplied HTML Without Escaping The Code, Facilitating Cross-Site Scripting Attacks
Dec 3 2001	PHP-Nuke Displays User-Supplied HTML Without Escaping The Code, Facilitating Cross-Site Scripting Attacks
Nov 23 2001	Post-Nuke Discloses Administrator Password in Authentication Cookie
Nov 22 2001	PHP-Nuke Discloses Administrator Password in Authentication Cookie
Nov 18 2001	Gallery Web Photo Gallery Software for PHPNuke Discloses Files on the Server to Remote Users
Nov 16 2001	Network Tools Addon for PHPNuke Lets Remote Users Execute Arbitrary Commands on the Server
Oct 22 2001	Webmin Creates Insecure Temporary Files That Can Be Modified By Local Users to Cause Webmin to Execute Arbitrary Commands with Root Level Privileges
Oct 22 2001	Network Query Tool PHP Utility Lacks Metacharacter Filtering and Lets Remote Users Execute Arbitrary Commands on the Server
Oct 5 2001	WinMySQLadmin Database Administration Tool Discloses MySQL Password to Local Users
Aug 23 2001	BadBlue Web Server Discloses PHP Source Code to Remote Users